Possible to setup roles to manage a subset of users

[Glenn Jenkins]

Is it possible to set hierarchical roles in crowd that so there's a group admin who can manage other users only within that group or would this need to be done programmatically?

Ex.

sys_admin_role
->administer all settings for all groups

group1_admin_role
-> CRUD users for group 1

group2_admin_role
-> CRUD users for group 2

....

.....

[Graham Bakay · Accepted solution]

Not possible in the current Crowd implementation. I've written an entire webapp, backed by Crowd, which allows us to delegate certain "permissions" (like who can control group members) to certain users or groups. I would love to implement the entire thing as a Crowd plugin, rather than a seperate webapp which uses the REST API, but unfortunately Crowd is the black sheep of the Plugin SDK family and doing UIs in the current iteration of Crowd is darn near impossible.

Anyway, here's the root issue (duplicated several times). https://jira.atlassian.com/browse/CWD-2318